Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
File: opAORlWrNJpGMrFAcZ3JcjBDFyU.mft (raw, json)
Hash identifier: ugr4dS17dm0WUD3gFNG5u3QqJUSmesl5Z6ju8iNUCY8=
Subject key identifier: 17:65:BD:11:DA:28:CC:53:5B:25:DB:62:69:8B:72:57:32:2B:3F:34
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 019F10E4B8B1C30558BEB44C2396127E4562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
Manifest number: 19A5
Signing time: Mon 29 Jun 2026 01:00:52 +0000
Manifest this update: Mon 29 Jun 2026 01:00:52 +0000
Manifest next update: Tue 30 Jun 2026 01:00:52 +0000
Files and hashes: 1: FRNi3sk0ZONfKtQJpcFEsCtLeHc.roa (hash: 7YUc6wfgN+sYhdx1cpmGPpDGVuugRkWqHt6/wHp1CDk=)
2: HkwuJu9io020PbxRWDFjsBLDBY0.roa (hash: 54qGpDCHJR33ZIOHfgUlFjHcaUi+BAqkWs7Zaq0wwz8=)
3: I5rk1e-Hzys6bZ34Mf2djbHcYi8.roa (hash: 68VlGtBqjjMcBNNmfnX4SS0mmlFBjW9D5LF+wH6+/Ac=)
4: L-To8dTceN5xxbEJ2QWl3_lVx0Y.roa (hash: VwojFWUhMCERU0Ki7bA5wqTbNgVL6QvW7R1KnsktuYI=)
5: RUdkYB7gYtQia_NavoRTMoG3pvE.roa (hash: T6PW2Xl5c1A8FrzU6sJtHxxL5BTjblBQGY54ZziHyw0=)
6: VQsDH7SGd5hal_nlNR8i5lyIdTU.asa (hash: CUgzrAYaMR8T7BZPdashoUewG1Aed1T1TxeGji8a5Ac=)
7: opAORlWrNJpGMrFAcZ3JcjBDFyU.crl (hash: sfsMfaCyZds5nMtcKunWYD8KGIEXAPP26g14Kdq0DAE=)
8: sypz3alt6kD9RUIKSoriU5Cgg9c.roa (hash: Q5XVGAYpXK3W0dy+5n1dt4ArQn0bSHlxksL+5uZfIdA=)
9: tDIPyCeJ6lwABqJN9BvBHe0hGng.roa (hash: Ct8rOWY/RQns6Y0hISopyHYEG2NvtwUoOdKLUr3Niy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e4:b8:b1:c3:05:58:be:b4:4c:23:96:12:7e:45:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: Jun 29 01:00:52 2026 GMT
Not After : Jun 30 01:00:52 2026 GMT
Subject: CN=1765bd11da28cc535b25db62698b7257322b3f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7b:4c:22:45:b5:10:68:82:7b:7e:c8:81:43:
38:89:f3:b8:a5:00:47:cf:a8:2c:9f:fd:8f:ec:0b:
76:79:fd:42:8c:56:7c:9a:d0:b3:7d:41:3e:8d:23:
1d:e5:bd:80:fa:bd:5f:d4:86:b4:36:d7:91:b4:89:
26:a6:40:cd:fa:18:cb:c8:46:1e:ec:c3:c4:44:f8:
b8:70:9d:2c:f7:61:78:e1:bc:22:40:72:2e:d0:e6:
45:49:47:e5:bb:6b:f0:8c:c2:aa:cc:e6:93:ed:84:
c1:04:98:a6:f8:3a:28:85:6d:45:d3:99:b1:0b:ae:
73:dd:0d:2c:36:9e:b3:f1:b0:84:4b:fd:e9:6b:75:
fc:c6:27:2a:03:b0:2a:39:e2:ff:8f:a4:d0:b3:74:
99:1d:ef:68:55:25:0c:c7:50:87:b1:f6:22:27:33:
a2:9d:5a:e7:44:e2:5e:df:0e:75:f8:80:1b:74:0b:
8b:4f:02:12:f6:28:82:a7:c0:80:3a:79:58:c9:43:
ce:1a:55:7a:04:b8:10:ba:61:b2:97:d9:22:1f:32:
28:4c:85:75:27:94:19:5a:93:2b:b1:fa:5e:40:3c:
3d:4a:a0:f9:b0:a9:e0:d3:db:df:10:38:4b:92:97:
2a:38:f2:4f:55:bd:17:1e:78:31:47:f3:f2:da:94:
bb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:65:BD:11:DA:28:CC:53:5B:25:DB:62:69:8B:72:57:32:2B:3F:34
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0f:6b:c6:a6:6d:f8:89:9e:4b:81:64:e4:5e:4f:ab:28:93:
c3:fb:e8:be:c6:3f:67:1c:85:2c:a1:39:3d:c0:d0:91:33:16:
8c:a5:79:23:db:4f:51:74:ab:fd:fc:41:68:60:98:b3:b1:78:
82:df:e2:6e:85:28:34:e8:f3:a2:67:52:8a:e8:4e:39:cc:7f:
bb:aa:b8:8c:d1:62:4d:a8:aa:de:9b:15:ba:1b:3f:5e:52:d1:
4a:5e:9a:39:63:c8:46:00:b2:76:7c:37:85:21:a2:95:e0:f4:
aa:78:9d:24:25:9f:bf:7e:b5:7d:06:bc:77:de:51:0c:bb:13:
1e:a3:72:ef:8e:4f:25:fb:2f:04:0a:a2:d7:10:7c:29:54:00:
c3:fa:41:0a:5e:bc:a1:c7:1a:a0:fe:cb:9c:c2:74:48:03:e9:
54:51:3c:f2:e6:56:1b:ff:01:eb:76:f4:c2:7a:f7:7c:d0:9e:
6d:5f:4a:91:d5:b7:33:45:8a:72:90:8c:83:2e:a1:72:44:0c:
23:a0:08:8a:a5:25:42:84:47:4c:ed:90:42:99:23:fa:98:4f:
97:b7:5a:f3:a1:bb:d7:3d:90:9d:60:b3:34:2f:41:bf:cf:99:
78:72:92:12:05:3f:e6:d2:be:30:f9:4e:10:59:a4:23:64:f6:
c9:d7:f2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:01 2026 by rpki-client